CVE-2024-50286 is a slab-use-after-free vulnerability in the ksmbd component of the Linux kernel, affecting Linux kernel versions. It stems from a race condition during session creation and expiration, allowing a local, low-privileged attacker to achieve high impact on confidentiality, integrity, and availability with high attack complexity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 6.1.117CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.2, < 6.6.61CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.7, < 6.11.8CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:* | ||
6.12CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.
HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025HP ThinPro 8.1 SP8 Security Updates
Oct 27, 2025kernel: ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
Nov 19, 2024ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
Nov 12, 2024